![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: c0qIdYgxNizvw4dfnrtdh8GzdOIP1v4uhnqvGRv5oYw=
Subject key identifier: 5C:07:AB:D4:EE:92:A3:AA:18:A4:E0:0D:B9:6B:C3:F9:BA:F5:E7:AE
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 0195124718E79808E11D6C5F7975A312597A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 0F2C
Signing time: Mon 17 Feb 2025 05:00:04 +0000
Manifest this update: Mon 17 Feb 2025 05:00:04 +0000
Manifest next update: Tue 18 Feb 2025 05:00:04 +0000
Files and hashes: 1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: ZU9G4e6YJ1Hnq+jioWGyQDjQOMR+1ie3R4KhA6smFV8=)
2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:18:e7:98:08:e1:1d:6c:5f:79:75:a3:12:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Feb 17 05:00:04 2025 GMT
Not After : Feb 18 05:00:04 2025 GMT
Subject: CN=5c07abd4ee92a3aa18a4e00db96bc3f9baf5e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:6c:bf:fc:87:b5:37:72:27:40:96:d6:10:
0e:3d:ea:58:05:b4:ed:b7:d2:65:69:50:b9:6f:aa:
0d:52:b6:00:72:43:9c:bc:f7:d5:e3:f9:9f:fa:77:
45:ef:f7:98:93:8d:74:38:ac:5f:02:4b:7f:ef:07:
9b:16:00:cd:ae:e8:c9:cb:11:31:dd:0c:64:6e:3a:
22:a7:e3:fb:a6:11:26:ee:e4:29:fe:88:9c:e8:95:
1f:44:d8:0f:fb:e5:f7:c4:bf:9a:e4:a9:cb:b2:15:
7b:f7:41:88:71:d0:08:57:67:f3:cb:b1:87:30:22:
4e:2c:fa:eb:6c:a3:f0:e2:af:44:52:3f:a3:db:04:
eb:b4:49:6d:9b:c9:ee:72:14:14:bc:7b:60:8c:ce:
f5:97:d9:62:67:fe:d6:e0:93:9d:83:d4:26:f2:c1:
d3:fd:9a:e9:23:6e:ed:a2:f4:12:16:37:16:29:89:
41:c9:d6:a8:db:2f:5f:d4:d2:57:22:ad:3a:2c:bd:
4f:01:95:7b:a8:bd:12:2d:10:7d:eb:8a:2a:f3:70:
77:77:8f:dd:a5:96:33:ae:67:b9:cb:59:e9:60:01:
33:4a:1c:62:a1:ec:5b:83:c3:09:36:f9:be:ba:19:
71:c1:02:e8:cc:d1:83:cb:0e:82:42:71:4e:f6:30:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:AB:D4:EE:92:A3:AA:18:A4:E0:0D:B9:6B:C3:F9:BA:F5:E7:AE
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:65:2e:bb:72:b5:e5:10:5f:09:da:d8:8f:d9:7c:55:30:
7a:0b:cd:48:9c:ff:76:a8:fc:45:90:f4:e3:35:72:30:7a:5d:
df:41:e6:47:00:dd:c0:ce:2c:a6:e2:65:de:53:3e:49:e9:07:
e3:4c:46:a0:24:5d:ef:70:e6:50:8b:47:11:6d:ad:ed:3e:12:
18:bb:c4:d2:f1:93:6d:30:ce:5f:e8:aa:9d:f9:74:da:33:c7:
df:e0:60:36:95:ac:e0:20:6d:98:d1:0f:69:4b:c2:ad:34:4a:
c6:b5:c6:cb:9a:a9:0a:c9:28:5e:dc:ef:85:8f:ec:34:58:bc:
0d:0e:da:91:f8:a0:99:83:6b:00:07:8b:a6:c2:c1:e9:ea:a5:
0e:73:05:ec:12:a9:5f:07:f1:74:01:ac:25:10:3a:11:2c:c0:
6f:3d:c2:be:a9:1c:18:a8:79:91:17:5e:af:2c:42:ee:dc:e5:
dd:03:21:20:fe:fc:f8:95:90:65:cb:d8:4d:04:28:9b:ca:43:
f0:af:07:5b:3e:7d:c7:7d:79:40:43:2b:94:02:06:6c:10:e3:
f3:39:a6:6c:ba:1d:3e:f3:34:1e:30:91:24:ed:1e:68:94:a3:
67:36:70:13:e9:34:a4:a5:42:72:49:e4:d0:9c:dd:0c:2e:f0:
77:a7:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:03 2025 by rpki-client